3 ms·

Same problem as using headers. That too is in-band, because the client can also create multipart requests.

• kccqzy 2y ago
  That misses the point. The OP's original use case is for a middleware to wrap a client request. The middleware would reject such multipart requests from the client.
  • tasn 2y ago
    The same way that it can reject certain headers, like it could have done in this case. It's no different, still in-band.
    • kccqzy 2y ago
      The middleware doesn't have to reject it. It could decide to just wrap it and pass it along. The backend code can then be able to distinguish which was sent by the client and which was added by the middleware. And that's the point. The middleware can do as little or as much filtering it desires, without causing any confusion to the backend.
• merb 2y ago
  It would work if all requests would be wrapped